[Snort-devel] IDS evaluation

From: Antonatos Spiros <antonat(at)ics.forth.gr>
Date: Sat May 24 2003 - 11:42:33 EDT

Some recent work (in progress) on IDS evaluation with emphasis on string matching algorithms is described in:  

http://www.cis.upenn.edu/~anagnost/papers/idsperf-draft-may03.ps  

Some of the main points are that you get very different results depending on test traffic, hardware setup, and that one should be cautious when using uniformly random payloads and "synthetic" rulesets for benchmarking.  

We'd appreciate comments/feedback on this. thanks!  

Antonatos Spiros  

---

This SF.net email is sponsored by: ObjectStore. If flattening out C++ or Java code to make your application fit in a relational database is painful, don't do it! Check out ObjectStore. Now part of Progress Software. http://www.objectstore.net/sourceforge

---

Snort-devel mailing list
Snort-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/snort-devel Received on Tue May 27 10:31:31 2003